Linux · Security advisory · May 30, 2022
ALSA-2022:4797: Security update for 32 packages
ALSA-2022:4797, released May 30, 2022, fixes 1 CVE across 32 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0442
91st percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| aopalliance | almalinux 8 | 1.0-20.module_el8.6.0+2786+d7c38b21 |
| apache-commons-cli | almalinux 8 | 1.4-7.module_el8.6.0+2786+d7c38b21 |
| apache-commons-codec | almalinux 8 | 1.13-3.module_el8.6.0+2786+d7c38b21 |
| apache-commons-io | almalinux 8 | 1:2.6-6.module_el8.6.0+2786+d7c38b21 |
| apache-commons-lang3 | almalinux 8 | 3.9-4.module_el8.6.0+2786+d7c38b21 |
| atinject | almalinux 8 | 1-31.20100611svn86.module_el8.6.0+2786+d7c38b21 |
| cdi-api | almalinux 8 | 2.0.1-3.module_el8.6.0+2786+d7c38b21 |
| geronimo-annotation | almalinux 8 | 1.0-26.module_el8.6.0+2786+d7c38b21 |
| google-guice | almalinux 8 | 4.2.2-4.module_el8.6.0+2786+d7c38b21 |
| guava | almalinux 8 | 28.1-3.module_el8.6.0+2786+d7c38b21 |
| httpcomponents-client | almalinux 8 | 4.5.10-4.module_el8.6.0+2786+d7c38b21 |
| httpcomponents-core | almalinux 8 | 4.4.12-3.module_el8.6.0+2786+d7c38b21 |
| jansi | almalinux 8 | 1.18-4.module_el8.6.0+2786+d7c38b21 |
| jcl-over-slf4j | almalinux 8 | 1.7.28-3.module_el8.6.0+2786+d7c38b21 |
| jsoup | almalinux 8 | 1.12.1-3.module_el8.6.0+2786+d7c38b21 |
| jsr-305 | almalinux 8 | 0-0.25.20130910svn.module_el8.6.0+2786+d7c38b21 |
| maven | almalinux 8 | 1:3.6.2-7.module_el8.6.0+2786+d7c38b21 |
| maven-lib | almalinux 8 | 1:3.6.2-7.module_el8.6.0+2786+d7c38b21 |
| maven-openjdk11 | almalinux 8 | 1:3.6.2-7.module_el8.6.0+2786+d7c38b21 |
| maven-openjdk17 | almalinux 8 | 1:3.6.2-7.module_el8.6.0+2786+d7c38b21 |
| maven-openjdk8 | almalinux 8 | 1:3.6.2-7.module_el8.6.0+2786+d7c38b21 |
| maven-resolver | almalinux 8 | 1.4.1-3.module_el8.6.0+2786+d7c38b21 |
| maven-shared-utils | almalinux 8 | 3.2.1-0.5.module_el8.6.0+2903+d6ca2362 |
| maven-wagon | almalinux 8 | 3.3.4-2.module_el8.6.0+2786+d7c38b21 |
| plexus-cipher | almalinux 8 | 1.7-17.module_el8.6.0+2786+d7c38b21 |
| plexus-classworlds | almalinux 8 | 2.6.0-4.module_el8.6.0+2786+d7c38b21 |
| plexus-containers-component-annotations | almalinux 8 | 2.1.0-2.module_el8.6.0+2786+d7c38b21 |
| plexus-interpolation | almalinux 8 | 1.26-3.module_el8.6.0+2786+d7c38b21 |
| plexus-sec-dispatcher | almalinux 8 | 1.4-29.module_el8.6.0+2786+d7c38b21 |
| plexus-utils | almalinux 8 | 3.3.0-3.module_el8.6.0+2786+d7c38b21 |
| sisu | almalinux 8 | 0.3.4-2.module_el8.6.0+2786+d7c38b21 |
| slf4j | almalinux 8 | 1.7.28-3.module_el8.6.0+2786+d7c38b21 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-29599 | libmaven-shared-utils-java: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings witho... | 9.8 | 0.0442 | None reported |
Showing 1 to 1 of 1
1